RUSTSEC-2026-0141
NoneCVSS
—
EPSS
—
Published
May 14, 2026
CISA due date
—
The record
TLS hostname verification disabled when using Boring TLS backend
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | lettre | 0.10.1 | 0.11.22 |
CVSS
—
EPSS
—
Published
May 14, 2026
CISA due date
—
TLS hostname verification disabled when using Boring TLS backend
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | lettre | 0.10.1 | 0.11.22 |